What's new

RT-AC86U telmex 2 router setup vpn path errors

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

floydo

Occasional Visitor
Attempting to help neighbor with 2 router vpn setup, but vpn does not function. Used this tutorial https://www.snbforums.com/threads/asus-dual-router-setup-with-one-dedicated-vpn-router-2021.69615/ with a telmex sercom FG6122TM router and RT AC86U merlin current FW as vpn. Using surfshark and their ovpn tcp file and assigned user credentials.

Telmex router specs state vpn passthru supported, but cannot find anything in settings,etc related to vpn or nat. Very basic menu.

Asus works fine as a passthru to internet, but entering vpn settings and turning on vpn yields two error comments 1)server client connection (screenshot) 2) Authentication password auth only Yes. Changing 2) to No eliminates that warning (screenshot).
It appears the vpn is not getting out on the internet....?

Telmex IP is 192.168.1.254, Asus 192.168.0.1 Lan to Wan connection. Asus DHCP on, did not specify gateway in Asus (per tutorial) but tried using Telmex IP no go. Asus Lan DNS off (per tutorial) and tried google DNS no go.IPV6 off on Telmex and Asus…..

Tried surfshark tech support and that was hopeless….

Suggestions?
thx
 

Attachments

  • Asus vpn screenshot nelson 2 110324.jpg
    Asus vpn screenshot nelson 2 110324.jpg
    71.3 KB · Views: 66
  • VPN error after surfshark 121248.jpg
    VPN error after surfshark 121248.jpg
    101.1 KB · Views: 75
You have "Redirect internet traffic through tunnel" set to "No". Correct that. Set "Username / Password Auth. Only" to "No."
 
Last edited:
Will do tunnel change to yes tomorrow and report back. Have changed Username/PW auth only to No and that eliminated that error.
Thanks
 
Tunnel change to yes, does not connect via vpn. (Screenshot) Error - Check Configuration!
Also attached is log of attempts to connect and at bottom of log is copy of vpn custom configuration (script?)
Error=certificate is not yet valid, but this may be caused by something else???
Suggestions?
 

Attachments

  • Error log 2_4_23.txt
    12.6 KB · Views: 54
  • Screenshot after redirect traffic tunnel yes2.jpg
    Screenshot after redirect traffic tunnel yes2.jpg
    93.5 KB · Views: 70
Your router's date and time have not been set. The VPN won't work without the correct date and time. Check the NTP settings in the router's GUI.
 
Colin, thx for the response....Date and time has been set, but a warning says system time and local time don't agree...enabling network monitoring dns query and Enable local NTP server does not seem to sync (remove errors)....? Under Lan DHCP server, the DNS Settings are blank per the tutorial. Is this a clue?
 

Attachments

  • system time.jpg
    system time.jpg
    63.6 KB · Views: 67
The router's date and time are still not synchronised. I've found that the router's NTP client doesn't work very reliably with pool.ntp.org, YMMV.

Try setting NTP Server to time.google.com and Secondary NTP Server to time.windows.com.

Also make sure your WAN DNS server is set to automatic (ISP), or some reliable publicly available servers (e.g. Google).


P.S. You don't need to enable the local NTP server, Network Monitoring or change the LAN DHCP settings.
 
Last edited:
Thanks Colin, the NTP servers solved the time sync issue, and the Asus WAN DNS was not selected...must have missed that part of the tutorial. Don't know how you identified the last item, but vpn is now working.
Really appreciate your inputs!
 
Last edited:
Glad to hear you got it working.

FYI, that guide you linked to isn't very good (or readable). No changes need to be done on the primary router. It also says to set the WAN DNS of the secondary router to those of the VPN provider - this is bad advice. You should set the WAN DNS as I suggested above.
 
Thanks again! I did try the vpn providers tutorials and help and they were way worse....This forum has been helpful thru my experience with voxel, merlin, tomato.
This particular config was challenging....
 

Similar threads

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top